8,323 results · Feed
-
Medium max 7.5ELSA-2020-1845 1 CVE
Moderate: bind security, bug fix, and enhancement update (Oracle Linux 8)
[32:9.11.13-3] - Fix rwlock to be thread-safe (#1740511) [32:9.11.13-2] - Release GeoIP data on reload (#1790879) [32:9.11.13-1] - Update to 9.11.13 [32:9.11.12-5] - Report failures on systemctl reload (#1739428) [32:9.11.12-4] - dhcp: Use monotonic time for …
-
MediumELSA-2020-1702 2 CVEs
Moderate: rsyslog security, bug fix, and enhancement update (Oracle Linux 8)
[8.1911.0-3] RHEL 8.2.0 ERRATUM - added patch reverting rejecting expired certs by default resolves: rhbz#1782353 - added patch silencing false errors on config.enabled statement resolves: rhbz#1659383 [8.1911.0-2] RHEL 8.2.0 ERRATUM - cleaned old patches, fi…
-
Medium max 4.5ELSA-2020-1794 2 CVEs
Moderate: systemd security, bug fix, and enhancement update (Oracle Linux 8)
[239-29.0.1.el8] - fix to enable systemd-pstore.service [Orabug: 30951066] - journal: change support URL shown in the catalog entries [Orabug: 30853009] - fix to generate systemd-pstore.service file [Orabug: 30230056] - fix _netdev is missing for iscsi entry …
-
MediumELSA-2020-1840 3 CVEs
Moderate: openssl security and bug fix update (Oracle Linux 8)
[1.1.1c-15] - add selftest of the RAND_DRBG implementation [1.1.1c-14] - fix incorrect error return value from FIPS_selftest_dsa - S390x: properly restore SIGILL signal handler [1.1.1c-12] - additional fix for the edk2 build [1.1.1c-9] - disallow use of SHA-1…
-
MediumELSA-2020-1635 1 CVE
Moderate: gdb security and bug fix update (Oracle Linux 8)
[8.2-11.0.1] - Import Implement s390x arch13 support (Andreas Krebbel, RH BZ 1768593). [8.2-8.0.2] - Forward-port patches from ol8-u1: gdb-ctf-forward-type.patch gdb-ctf-func-args.patch gdb-ctf-optout-var.patch - Reviewed-by: Jose E. Marchesi <jose.marchesi@o…
-
LowELSA-2020-1828 1 CVE
Low: glibc security, bug fix, and enhancement update (Oracle Linux 8)
[2.28-101.0.1] - add Ampere emag to tunable cpu list (Patrick McGehearty) - add optimized memset for emag - add an ASIMD variant of strlen for falkor - Orabug: 2700101. - Modify glibc-ora28849085.patch so it works with RHCK kernels. - Orabug: 28849085. - Make…
-
LowELSA-2020-1631 1 CVE
Low: GStreamer, libmad, and SDL security, bug fix, and enhancement update (Oracle Linux 8)
gstreamer1 [1.16.1-2] - Update to 1.16.2 for correctly pick up for side gating - Resolves: rhbz#1756299 [1.16.1-1] - Update to 1.16.1 - Enable libcap for the ptp helper permissions - Resolves: rhbz#1756299 gstreamer1-plugins-bad-free [1.16.1-1] - Update to 1.…
-
MediumELSA-2020-1725 2 CVEs
Moderate: haproxy security, bug fix, and enhancement update (Oracle Linux 8)
[1.8.23-3] - Fix hapack zero byte input causing overwrite (CVE-2020-11100, #1819519) [1.8.23-2] - Consider exist status 143 as success (#1778844) [1.8.23-1] - Update to 1.8.23 (#1774745)
-
MediumELSA-2020-1864 1 CVE
Moderate: gcc security and bug fix update (Oracle Linux 8)
[8.3.1-5.0.3] - Fix Orabug 29838827 - provide an option to adjust the maximum depth of nested #include This is the same bug as gcc upstream PR90581 from Gcc9: gcc9-pr90581.patch - Fix Orabug 29541051 - confusing error message when there is a problem with ASAN…
-
LowELSA-2020-1604 1 CVE
Low: tcpdump security update (Oracle Linux 8)
[14:4.9.2-6] - Resolves: #1715423 - tcpdump pre creates user and groups unconditionally - Resolves: #1655622 - CVE-2018-19519 Stack-based buffer over-read in print-hncp.c:print_prefix() via crafted pcap
-
MediumELSA-2020-1804 1 CVE
Moderate: sudo security, bug fix, and enhancement update (Oracle Linux 8)
[1.8.29-5] - RHEL 8.2 ERRATUM - CVE-2019-18634 Resolves: rhbz#1798093 [1.8.29-4] - RHEL 8.2 ERRATUM - CVE-2019-19232 Resolves: rhbz#1786987 Resolves: rhbz#1796518 [1.8.29-2] - RHEL 8.2 ERRATUM - rebase to 1.8.29 Resolves: rhbz#1733961 Resolves: rhbz#1651662 […
-
High max 7.5ELSA-2020-1769 16 CVEs
Important: kernel security, bug fix, and enhancement update (Oracle Linux 8)
[4.18.0-193.el8.OL8] - Oracle Linux certificates (Alexey Petrenko) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Orabug: 24817676] [4.18.0-193.el8] - [kvm] KV…
-
LowELSA-2020-1616 1 CVE
Low: irssi security update (Oracle Linux 8)
[1.1.1-3] - Fixed use after free when sending SASL login to server Resolves: CVE-2019-13045
-
MediumELSA-2020-1716 1 CVE
Moderate: unbound security update (Oracle Linux 8)
[1.7.3-10] - Secure ipsec mode (#1772061) - CVE-2019-18934 [1.7.3-9] - Use pthread_mutex_t locks when dealing with I/O operations (#1775708)
-
Medium max 6.5ELSA-2020-1577 29 CVEs
Moderate: exiv2 security, bug fix, and enhancement update (Oracle Linux 8)
exiv2 [0.27.2-5] - Fix failing test Resolves: bz#1800472 [0.27.2-4] - Drop test for the previous CVE as we test it manually and we dont have POC available Resolves: bz#1800472 [0.27.2-3] - Fix infinite loop and hang in Jp2Image::readMetadata() Resolves: bz#18…
-
MediumELSA-2020-1708 4 CVEs
Moderate: liblouis security and bug fix update (Oracle Linux 8)
[2.6.2-21] - A further Coverity fix (#1602585) [2.6.2-20] - Fix buffer overruns found by Coverity (#1602585) [2.6.2-19] - Fix two issues found by Coverity (#1602585) [2.6.2-18] - Apply patch for CVE-2018-12085 (#1589942) [2.6.2-17] - Fix CVE-2018-11577 (#1585…
-
Low max 4.5ELSA-2020-1912 1 CVE
Low: bluez security update (Oracle Linux 8)
[5.50-3] + bluez-5.50-3 - Bump the version [5.50-2] + bluez-5.50-2 - Fixing CVE-2018-10910 (#1606373)
-
MediumELSA-2020-1672 1 CVE
Moderate: freeradius:3.0 security update (Oracle Linux 8)
-
Medium max 5.9ELSA-2020-1650 3 CVEs
Moderate: container-tools:ol8 security, bug fix, and enhancement update (Oracle Linux 8)
-
Medium max 4.8ELSA-2020-1624 17 CVEs
Moderate: php:7.2 security, bug fix, and enhancement update (Oracle Linux 8)
-
Medium max 9.8ELSA-2020-1605 6 CVEs
Moderate: python27:2.7 security, bug fix, and enhancement update (Oracle Linux 8)
-
LowELSA-2020-1797 2 CVEs
Low: binutils security and bug fix update (Oracle Linux 8)
[2.30-73.0.1] - Forward-port of Oracle patches from 2.30-68.0.2. - Reviewed-by: Elena Zannoni <elena.zannoni@oracle.com> [2.30-68.0.2] - Backport the non-cycle-detecting-capable deduplicating CTF linker - Backport a fix for an upstream hashtab crash (no upstr…
-
LowELSA-2020-1581 6 CVEs
Low: wavpack security update (Oracle Linux 8)
[5.1.0-15] - fix Out-of-bounds read in WavpackVerifySingleBlock function (#1663151) - CVE-2018-19841 [5.1.0-14] - fix uninitialized variable in ParseCaffHeaderConfig (#1741251) - CVE-2019-1010317 [5.1.0-13] - fortify parsing of .dff files (#1707428, #1733627)…
-
MediumELSA-2020-1653 1 CVE
Moderate: zziplib security update (Oracle Linux 8)
[0.13.68-8] - Fix CVE-2018-17828 in the 'single z' binaries - Resolves: #1772447
-
Medium max 9.8ELSA-2020-1644 5 CVEs
Moderate: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update (Oracle Linux 8)
-
High max 7.8ELSA-2020-5663 6 CVEs
Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)
[5.4.17-2011.1.2] - ctf: discard CTF from the vDSO (Nick Alcock) [Orabug: 31194036] [5.4.17-2011.1.1] - slcan: Don't transmit uninitialized stack data in padding (Richard Palethorpe) [Orabug: 31136750] {CVE-2020-11494} - blktrace: Protect q->blk_trace with RC…
-
High max 9.8ELSA-2020-1561 2 CVEs
Important: python-twisted-web security update (Oracle Linux 7)
[12.1.0-7] - Fix CVE-2020-10108 and CVE-2020-10109 multiple HTTP request smuggling vulnderabilities Resolves: rhbz#1813439 rhbz#1813447 - Remove useless macros definitions
-
High max 8.3ELSA-2020-1507 8 CVEs
Important: java-1.7.0-openjdk security update (Oracle Linux 7)
[1:1.7.0.261-2.6.22.2.0.1] - Update DISTRO_NAME in specfile [1:1.7.0.261-2.6.22.2] - Modify NEWS installation to avoid subpackage naming. - Resolves: rhbz#1810557 [1:1.7.0.261-2.6.22.1] - Add release notes from IcedTea. - Mark license files with appropriate m…
-
High max 9.3ELSA-2020-1511 1 CVE
Important: git security update (Oracle Linux 7)
[1.8.3.1-22 ] - Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260
-
High max 8.3ELSA-2020-1509 13 CVEs
Important: java-11-openjdk security update (Oracle Linux 7)
[1:11.0.7.10-4.0.1] - link atomic for ix86 build [1:11.0.7.10-4] - Add JDK-8228407 backport to resolve crashes during verification. - Resolves: rhbz#1810557 [1:11.0.7.10-3] - Amend release notes, removing issue actually fixed in 11.0.6. - Resolves: rhbz#18105…
-
High max 8.3ELSA-2020-1512 10 CVEs
Important: java-1.8.0-openjdk security update (Oracle Linux 7)
[1:1.8.0.252.b09-2] - Add release notes. - Mark license files with appropriate macro. - Resolves: rhbz#1810557 [1:1.8.0.252.b09-1] - Make use of --with-extra-asflags introduced in jdk8u252-b01. - Resolves: rhbz#1810557 [1:1.8.0.252.b09-0] - Update to aarch64-…
-
High max 8.3ELSA-2020-1515 10 CVEs
Important: java-1.8.0-openjdk security update (Oracle Linux 8)
[1:1.8.0.252.b09-2] - Add release notes. - Resolves: rhbz#1810557 [1:1.8.0.252.b09-1] - Make use of --with-extra-asflags introduced in jdk8u252-b01. - Resolves: rhbz#1810557 [1:1.8.0.252.b09-0] - Update to aarch64-shenandoah-jdk8u252-b09. - Switch to GA mode …
-
High max 9.3ELSA-2020-1513 1 CVE
Important: git security update (Oracle Linux 8)
[2.18.2-2] - Crafted URL containing new lines can cause credential leak - Resolves: CVE-2020-5260
-
High max 8.3ELSA-2020-1514 13 CVEs
Important: java-11-openjdk security update (Oracle Linux 8)
[1:11.0.7.10-1] - Add JDK-8228407 backport to resolve crashes during verification. - Resolves: rhbz#1810557 [1:11.0.7.10-1] - Amend release notes, removing issue actually fixed in 11.0.6. - Resolves: rhbz#1810557 [1:11.0.7.10-1] - Re-apply --with-extra-asflag…
-
High max 8.1
Important: thunderbird security update (Oracle Linux 8)
[68.7.0-1.0.1.el8_1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [68.7.0-1] - Update to 68.7.0 build1
-
MediumELSA-2020-1497 5 CVEs
Moderate: tigervnc security update (Oracle Linux 8)
[1.9.0-14] - Bump build version Resolves: bz#1819877 Resolves: bz#1819879 Resolves: bz#1819882 Resolves: bz#1819886 Resolves: bz#1819884 [1.9.0-13] - Fix stack buffer overflow in CMsgReader::readSetCursor Resolves: bz#1819877 - Fix heap buffer overflow in Dec…
-
HighELSA-2020-5654 0 CVEs
Important: kubernetes kubeadm-ha-setup kubeadm-upgrade security update (Oracle Linux 7)
kubernetes [1.12.10-1.0.11] - [CVE-2019-11254] kube-apiserver Denial of Service vulnerability from malicious YAML payloads [1.12.10-1.0.10] - [CVE-2019-16276] Kubernetes Vulnerabilities Allow Authentication Bypass, DoS [1.12.10-1.0.9] - Define rolling update …
-
High max 8.1
Important: thunderbird security update (Oracle Linux 7)
[68.7.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [68.7.0-1] - Update to 68.7.0 build1
-
High max 6.5ELSA-2020-5653 1 CVE
Important: olcne kubernetes security update (Oracle Linux 7)
olcne [1.0.3-1] - updated the default Kubernetes version to 1.14.9 kubernetes [1.14.9-1.0.3] - [CVE-2019-11254] kube-apiserver Denial of Service vulnerability from malicious YAML payloads [1.14.9-1.0.2] - Use bounded crio version [1.14.9-1.0.1] - Added Oracle…
-
HighELSA-2020-1317 1 CVE
Important: nodejs:10 security update (Oracle Linux 8)
nodejs [1:10.19.0-2] - Resolves: RHBZ#1811498 [1:10.19.0-1] - Rebase to 10.19.0 to fix CVE-2019-15604 to CVE-2019-15606 [1:10.16.3-1] - Rebase to 10.16.3 to fix CVE-2019-9511 to CVE-2019-9518 [1:10.14.1-1] - Resolves: RHBZ#1644207 - fixes node-gyp permissions…